tools

DECNET

honeypot deception network framework. spin up a fleet of fake hosts (deckies) that look like a real lan, trap every probe, then profile, cluster, and attribute the attacker behind it.

site · git · github

BEHAVE

threat actor behavioral framework.

git · pypi

DCMK

differential conformance matrix kraftwerk. en masse tester for standards' wide differential testing for distributed pwning. research grade; made for reproducibility and falsifiability.

private · coming soon.

github

hl7-pwn

hl7 v2 / mllp offensive toolkit. fingerprint interface engines, recon, patient-data query, order injection, fuzzing.

private · contact with justification

github

dimse-pwn

dimse / dicom offensive toolkit. dimse, my beloved.

private · contact with justification

github

stealergram

infostealer-cred monitor for redteam ops. point it at a telegram channel and it scrapes the whole thing for just your target, not the entire dump. handy on engagements when storage is tight.

git

adlabs

not exactly a tool, but rather an AD lab for learning/teaching purposes. use freely for classes or just general pwning.

github

stegolabs

a couple of steganography labs for teaching and learning, very similar to the above. use freely.

github